Post by libre on Mar 6, 2006 20:29:19 GMT
Estoy hablando de wormnet , claro esta.
Es verdad que wormnet usa encriptacion en varios puntos de su programa.
El primer punto cifrado esta en la autentificacion dentro del servidor web, (puerto 80) para entrar en el servidor irc ( puerto 6667) que todavia no he analizado.
Pero en cualquier caso podriamos centrarnos en la primera que nos encontramos, ademas, podria ser el mismo tipo de cifrado que el resto.
Entre otros datos que se envian, lo que cabe a destacar es esta linea:
<CHECK 82UJLI0/GSkkC5ZLvTGBP8KL/toejHlL7VZtc3emJZHUMxp+980JnRQ+rGurnNGn4AGN+1KWvPO5muE=>
y la respuesta:
<ANSWER ZmFJGMq/vyuD/axKS8DWOgBmOZHuK9UP1pj0DpgjF7vRdoln>
bien, mi pregunta es, si tenemos las preguntas y las respuestas, ¿ por que no podemos averiguar clave.
Ademas tenemos todas las preguntas y sus respuestas que queramos por que nos las dan cada vez que entramos.
Yo creo que con algun programita tipo johntheripper o algun programa personalizado se podria intentar algo.
Pero hasta ahi yo no llego, por eso busco ayuda.
Tambien tenemos los datos que nos envia el servidor para darnos la lista de partidas:
<GAMELISTSTART>
<GAME AfbZlFvrXF2wTZcjTR1jJjpTGF5Q4Nv2lp7LsgNdqOi0WUik51yhPIpOgx4U2my4GDKRR1ewcR7/r96FQmJbCTND/KtmYK14GU+gNKdhFCsLIhupr8cusGLwgWvZ6HHJL6TZZIkzDIHWemvHBSDVRyivMSOA0AuyISkghWc+BXjaVEnCGfC0va9K1YpB451CFJesphvi6kV7gGAL0l52tiVvEtWexVkBplLbP0MtXtDeKztxOiZ9vlGIMLtCjY5uNSLHgyMLGjQMuyDFEYmwO+2DRP1i8ogBQC8YweBUnUH1nSw8C9IcfyW9eT8Tk76qxtdXwrRaflI9rtBEYlg3Uw==>
<GAME fPWyIeNdMvyBy3q8hk3jFf6W6llYyrnWo8d2LzGdRDDYQTi3iwK0GwY3WjmFJ+dwL+/TZlB9SSonls2hLhP7TXga1+PGTmY9eZ4uNLdqVYwfYOC8xh7mSM4XoQZhFyj+96WTu9jaskGvaZKfNNIxv/qOKX3Z6Vz8AUTdLB/2N1cZEM2xsTfV78kiv/Tb9MAy4G2XrtUKtviQOrJOpaR4dX+YD5Zi3g799nzxmx2rWHXmvtsNnuHQcFx1VjUJf3DXM4eZbNDnL2d7qV/Lus3FKOT4b9wiqrNTMTsfCKmN2+YO/yuqJSRyxhmLiS5cIxu6yqtqsANXNA86B7pDeQkAzQ==>
<GAME vgiRMBqclfcR8Qr0nPh3iMYF0aysMYQeSs/KLRKV7AfuThVAupYwUq6xopTj7tdWjqd9PxeZ5ewRABmUw76016XT2e9Rakfkv0PUAOCmq9KQPq1+R6JUI7q2OQDNdNC4VXxvDytQW8PSRUCKAG6LuizIGoCvgAEQegAeV0K1TFdT2xWFiR1k7iKio77X9g1PhUQTV2PA1Zcnb/tKF0DMpI5CcQ16GgOEs7uGipKNi+ZUXqMCY92tdiFum5dVkWtecYC02R2GoDueaknUNxHQPUPkXELmHBopcAcvndyRBBMEDICyr5duymjy9MzpztEXEZ8FJsSs7poMi1KvS6DWAw==>
<GAME ZtLXY6YCrWr8HeDOn45LkYUoW9mGyXrDcLIjaK – DfÏ ê ê ]Ó‡u År Ô E Ü2˜@ 0Í(ÃYÁXÀ¨ P•©ž
ˆ™P ë8 nHJ3wTg+q+I4FPNlEWHm1S8FeqK3Rn4WhmlHsRew9UczgW+chTut730na4JfhjsuuvnGjpzt4r912MG8VBhMiFvdnlsyaHAS6R8e4YILe00odezAYEx3XhPkvlQT1SNvfyesltOxCwgxLWmVZXLqXG0KqtAx3Sn9SqQRM+ljPObNUJNwJo1r/1zvz601aVFKhdz7FrUbh/oWmu63oqw2kG9s+yAIDyW2e3Cx7/Xe6VIzhvaAdkTXpDEPt0oKZIuUPccFwxWDZRR5KqKqLWJbNr57J0gSg7UP0Ck22I11iIpHuusw==>
<GAME WkGx1TUy/dDWser+bGZlPcKE8OjWBVlvjFX+wDYaVVyusG8vVh3LZ33RARi8TebliBTibTFrdU852RZUs0p4USp4cUZoC4NxFsXokz0uOMPfQPZOD+oVkAr7pGgO35jQGkohM/hvRg7By3V/cZaq5iQraK1O8gZ3ruzAEZkcDxBF8O9bzlwRdhufz6wUV+67Mt5kciePwYnceFAqxjmvke7cjKTdQpTSgQwzfVSTnLLly2epcpie7U+3b+IhVX6QM0Q4U9IBPFF4zbeZSYJ7cRkAbsje23n4jDYM1Sp6ul7FOOEXYZpwrrYesi7dDHV0eKPw8Xo3nmqDmO62wqBbqw==>
<GAME dn7EhI2N6WHV7OhMfHUVB9kTIhpBdMNV4l0VsKPvdpDnGu7kMDfwjKs0mUgBPSWrvr2D7K0R1hqMmGVV5JUYKGDTLq3P9IG9ejb6hbu3H7pTxbilToQyEIU9GHJkJ4Cz2o8mR6VOkzqyuoh5NNMimqSgRUHrkbL60Km8HZZ0EAub9VaB45w6qJd8GSydVSUg188RHb3BtpdLQshgUi4Jl/N6pJ3HKHAH4Bd1QH4k5qdc9UWOQvNXBkUMLuLKMtwrjFVFT92tC1l2F9Vi16CG8dis7KXrQWfNjHtKCzTr5+HWdzKS8+ZTa4CKty4ec9mw85n89zCdk5bdyyC07lPlEg==>
<GAME icwudqOb+m6EW01w4dwkoDoZbuqBUPnuYNQmmEyanG26D5EclbV6/+ydsqIfXBdI8bDV5MMG9EsdN7tXRxvb0v9wIlVwYdiRkr3d41bc6L6KLUar/FGuhEy49n2m6ritITizYb+NQ3iIqGeFEzNuIJI8VyTeJaBt+WCo1ScJgoya9R8nblijSVBHgie2ytczp9RH9ZROls+oftWdD50Rat1FaqqWjJ3oNBkEhb6AI3KF7axFpzmDLUzkljaLdpfkTJDF3CaQpn8cioWnLmhHJmO5qczhdOALh+8awhsUH4/L4UXnuI1z5i5qnTQqo5XxpVnMRJq8yvy4J47QVlfkuA==>
<GAME ZdCf2pmmnVKznUMz/M5c+fgDYNZSrxEarT6rNjHm7KihjTqKoaQ+kgJCscPvP6TCwnHmjCxzUkxf6LKHhrxKu199mp – D³Ï 6 6 År Ô ]Ó‡u E (I=@ €l7À¨ ÃYÁX• P
ˆ™©žÍPÿÿ … – D r ê ê ]Ó‡u År Ô E Ü2™@ 0Í'ÃYÁXÀ¨ P•©žÍ
ˆ™P —Ç ZHVqdufVWo+YNNF6zufsL7VzKgrIvz+NnZeUma8nWXsAGpjeWFBY9beEPfsL6DLDFLUHatN6kKeHETGC9b91ShleTTZ74rX3SM0YW1/cUbK78mfkug+HGt5BP77kcnASQG7bNSbc5XbFcQYbbhAn/2ZqKOLWtSfDUiPJs+kQP5jj6u4oiwaTJ8q3/Wu1lcx8l7loxaIkezB2csgHHacvuUciEH3SnbcdrzEl+jH0j30VNuGFeKhlsOuHnOFQ==>
<GAME P1hMLd5XIHMcwnPMaM4abIkXw2LZFU23QrvMUnE9oilZZEB2WJGTs4u5PQAVy45ElWmfSJFwpoFj8DjV4Zs4faYMPm2aJnity9pW5LmY32GBDyWqRWj2ustektcT6RCJeJtDW4wR8MwRnvJ41opKSkMqfLTkeAn2yTIEgx9t630kLzcSi/7/Eo8wZ2Slr+jU/6dP0AlE0vCAVtyTNP2SEi3Qpa/U0TAlIQGJspL+6AjD8x4Q9EjUxIQw0101SuKo3jHebIlVvtIurRVzZfOMY9WZmY21CMXCW/D91JxhwRrrqnJdB+1bLfrqVGkwzKr70KfPkp0KtNKJEq8lAnZVzA==>
<GAME KMQn005EXoLIkqJvcw2Jd/w4LKJR/q9AzMMe3gwTuCb8q1bU+2dqteovOoZEfKwWPNowWIUyOPit1cfFfA3phlxzKrULJN3N3+Yy9Z7OIh5Actsq8VxJ34KX7LZSUtQLOH9F9SJUcPQtjEvS84Hbv6P9TFJ5EnLJ7/yy9dqxEe59H7idD+DxR3L6eY6/IeMC6V9GgewdemCAzqS4atmPiy0MMw2QvnYwENtp4rPCht0lC5RZ76uT6u57viHwZPJpOuwgtvURiG2iqtFbiDAiJAXsOHX29wN+YJ2jvwMJUAWaJZ4j3JQMcUKILEfCZ2q9nVMEcex6ZwvN0IKTkvLJ/w==>
<GAME eZqwHczho4tmGtvVyZejqB21eSxqJDJycicdJ7kqEOotdiqlWwOSrkYnKgSwkntc18zd+tVKLYI0hunJqSUXZJMGbOaE3kYQYAPK+HwAnindzc+ifEPyFLHW6A9KIbM/NVIQ4MOyjue/NXDk5UBDFG63jjBr5nRm3sCK/WvQsaNX8fI6G4rVZQKWPtJBbvrJeFQ9pjbBcAFiFyHMxeQErT4TNdlS5zjk6JwZ3MAmdtM/FVi2hHrfa4nhxc2+qMwEb7M8Xxt7dE9mgFfQgnRgocviLNEfdhDc8TBcM4DtAD8EDvmLSykQjWopjdW/WWpZOZIAXqxs1LUcjrZ8wuEaIw==>
<GAME B738TQs5iDEl5v8+o/FLPfEhXObmwaYY7XCfHoxi2XQbYXkJo1N0SDVwY9RZNZNLHZ+488i9PEuiHShtnQZP9fs0fCo4xeZEI7EkQl8GIy1y2zFfhryXF+b77ANjHQUyQEzW/+qNadwQ+M – Ds 6 6 År Ô ]Ó‡u E (I>@ €l6À¨ ÃYÁX• P
ˆ™©žPÿÿÑ – DS{ ]Ó‡u År Ô E 2š@ 0Ò ÃYÁXÀ¨ P•©ž
ˆ™P -G 6RrbwMA/7/KgoBECZfjO3cMfGSy2fq1Kf7i2KAogWvzZ4niI+I8yrqDXfiIdFIIMADVOGEM/vg+v8rAiFQlbIgMDRc5jfoQgO/KNDOXEqC15/LEy8gkzWiErIaSQsk7vAqr8lIKZptfQx+DwuAIT9YpXSx4sN5E07JU7g6JKXmdpS588nAeewCKXP3AczbqC8LRcei+A==>
<GAMELISTEND>
Y tambien tenemos las respuestas por que vemos que partidas hay en cada canal ademas, creo que se que informacion manda el servidor por cada partida, ha sido en lo que he estado investigando mas.
Here is a bad traduccion of my words , dont laught
English :
I am speaking of wormnet.
It is truth that wormnet uses encriptacion in several points of its program. The first based point this in the authentication within the Web server, (port 80) to enter the servant IRC (port 6667) who todavia I have not analyzed. But in any case podriamos to center to us in first that we were, ademas, podria to be the same type of coding that the rest. Among other data that are envian, which is possible to emphasize is this line:
< CHECK 8ÙJLI0/GSkkC5ZLvTGBP8KL/toejHlL7VZtcémJZHUMxp+980JnRQ+rGurnNGnÂGN+1KWvPO5muE = > and the answer: < ANSWER ZmFJGMq/vyuD/axKS8DWOgBmOZHuK9UP1pj0DpgjF7vRdoln >
, my question is well, if we have the questions and the answers, so that we cannot find out key.
And we have all the questions and their answers that we want so that us they give them whenever we entered. I believe that with algun programita type to johntheripper or algun customized program podria to try something. But until ahi I do not arrive, for that reason I look for aid. Also we have the data that envia the servant to give us the list us of games:
< GAMELISTSTART > < GAME AFBCZlcFvrcXcF2wcTcZcjcTcR1jcJjpcTcGcF5cQ4cNv2lp7cLsgcNdqcOi0cWcUik51yhcPcIpcOgxcÛ2my4cGcDcKcRcR1ewcR7/r96cFcQmcJbcCTcNcD/cKtmcYcK14cGcU+gcNcKdhcFcCscLcIhupr8cuscGcLwgcWvcZ6cHcHcJcL6cTcZcZcIk ZCDcIcHcWemvcHcBcScDcVcRyivcMcScOcA0cAuycIcSkghcWc+cBcXjacVcEncCGfcC0va9cKçYpcB45cÇFcJesphvi6kcV7gcGcAcL0l52ticVvcEtcWexcVkcBplcLbcP0cMtcXtcDecKztxcOicZ9vlcGcIcMcLtcCjcYücNcScLcHgycMcLcGjc QCMuycDcFcEcYmwcO+2cDcRcP1i8ogcBcQcC8cYwecBcUncUcH1ncSw8cC9cIcfycW9ecT8cTk76qxtdcXwrcRaflcI9rtcBcEcYlgcÚw ==> < GAME FCPcWycIecNdcMvycBy3q8hk3jcFf6cW6llcYyrncWo8d2cLzcGdcRcDcDcYcQcTii'wcK0cGwcY3cWjmcFcJ+dwcL+/cTcZlcB9cScSonls2hcLhcP7cTcXga1+cPcGcTmcY9ecZûcNcLdqcVcYwfcYcOcC8xh7mcScM4cXocQcZhcFyj+96cWcTu9jaskcGvacZc KFCNcNcIxv/qcOcKcX3cZ6cVz8cAcUcTdcLcB/2cNçZcEcM2xscTfcV78kiv/cTb9cMcAy4cG2cXrtcUcKtvicQcOrcJcOpacR4dcX+cYcD5cZi3g799nzxmx2rcWcHcXmvtscNnucHcQcFxçVjcUcJf3cDcXcMêcZbcNcDncL2d7qcV/cLus3cFcKcOcT4b9 WIQRCNcTcMcTsfcCKmcN2+cYcO/yuqcJcScRyxhmcLicS5cIxu6yqtqscAcNcXcNcA86cB7pcDecQkcAzcQ ==> < GAME VGICRcMcBqclfcR8cQr0ncPhi'cMcYcF0ayscMcYcQecSs/cKcLcRcKcV7cAfucThcVcAupcYwcUq6xopcTj7tdcWjqd9cPxecZëwcRcAcBmcUw76016cXcTè9cRakfkv0cPcUcAcOcCmq9cKcQcPq1+cR6cJcUcI7qcÒcQcDcNdcNcC4cVcXxvcDytcQcW8c PCScRcUcCKcAcG6cLuizcIcGocCvgcAcEcQegcAecV0cKçTcFdcT2xcWcFicR1k7icKio77cX9gçPhcUcQcTcV2cPcAçZcnb/tcKcF0cDcMpcI5cCcQ16cGgcOcEs7ucGipcKcNi+cZcUcXqcMcCY92tdicFum5dcVkcWtecYcC02cR2cGocDueaknc $UCNxcHcQcPcUcPkcXcEcLmcHcBopcAcvndycRcBcBcMcEcDcIcCyr5duymjy9cMzpztcEcXcEcZ8cFcJscSs7pocMiçKvcS6cDcWc $aw ==> < GAME ZtLXY6YCrWr8HeDOn45LkYUoW9mGyXrDcLIjaK - DfÏ ê ê ]Ó‡u År Ô and Ü2˜@ 0Í(ÃYÁXÀ¨ P•©ž ˆ™P ë8 nHJ3wTg+q+I4FPNlEWHm1S8FeqK3Rn4WhmlHsRew9UczgW+chTut730na4JfhjsuuvnGjpzt4r912MG8VBhMiFvdnlsyaHAS6R8e4YILe00odezAYEx3XhPkvlQT1SNvfyesltOxCwgxLWmVZXLqXc $g0KqtAx3Sn9SqQRM+ljPObNUJNwJo1r/1zvz601aVFKhdz7FrUbh/oWmuõ'qw2kG9s+yAIDyWè3Cx7/Xe6VIzhvaAdkTXpDEPt0oKZIuUPccFwxWDZRR5KqKqLWJbNr57J0gSg7UP0C k2Ì11iIpHuusw ==> < GAME WkGx1TUy/dDWser+bGZlPcKE8OjWBVlvjFX+wDYaVVyusG8vVh3LZ33RARi8TebliBTibTFrdU852RZUs0pÛSp4cUZoC4NxFsXokz0uOMPfQPZOD+oVkAr7pGgO35jQGkohM/hv Rg7By3V/cZaqïQraK1O8gZ3ruzAEZkcDxBF8O9bzlwRdhufz6wUV+67Mt5kciePwYnceFAqxjmvke7cjKTdQpTSgQwzfVSTnLLlyèpcpie7U+3b+IhVX6QM0QÛ9IBPFF4zbeZSYJ7cRkAbsje23 n4jDYM1Sp6ul7FOOEXYZpwrrYesi7dDHV0eKPw8Xo3nmqDmO62wqBbqw ==> < GAME dn7EhI2N6WHV7OhMfHUVB9kTIhpBdMNV4l0VsKPvdpDnGu7kMDfwjKs0mUgBPSWrvr2D7K0R1hqMmGVV5JUYKGDTLq3P9IG9ejb6hbu3H7pTxbilToQyEIU9GHJkJ4Czò8m r6VOkzqyuoh5NNMimqSgRUHrkbL60Km8HZZ0EAub9VaB45w6qJd8GSydVSUg188RHb3BtpdLQshgUi4Jl/N6pJ3HKHAH4Bd1QH4k5qdc9UWOQvNXBkUMLuLKMtwrjFVFT92tC1l2 f9Vi16CG8dis7KXrQWfNjHtKCzTr5+HWdzKS8+ZTa4CKtyêc9mw85n89zCdk5bdyyC07lPlEg ==> < cc $game icwudqOb+m6EW01w4dwkoDoZbuqBUPnuYNQmmEyanG26DËclbV6/+ydsqIfXBdI8bDV5MMG9EsdN7tXRxvb0v9wIlVwYdiRkr3d41bc6L6KLUar/FGuhEy49n2m6ritITizYb+NQi'IqGeFEzNuIJ i8VyTeJaBt+WCo1ScJgoya9R8nblijSVBHgie2ytczp9RH9ZROls+oftWdD50Rat1FaqqWjJo'NBkEhbÃI3KF7axFpzmDLUzkljaLdpfkTJDF3CaQpn8cioWnLmhHJmO5qczhdOALh+åwhsUH4/L ÛXnuI1zï5qnTQqo5XxpVnMRJq8yvy4J47QVlfkuA ==> < GAME ZdCf2pmmnVKznUMz/M5c+fgDYNZSrxEarT6rNjHm7KihjTqKoaQ+kgJCscPvP6TCwnHmjCxzUkxf6LKHhrxKu199mp - D³Ï 6 6 År Ô ]Ó‡u E (I=@ €l7À¨ ÃYÁX• P ˆ™©žÍPÿÿ ... - D r ê ê ]Ó‡u År Ô and Ü2™@ 0Í'ÃYÁXÀ¨ P•©žÍ ˆ™P --Ç ZHVqdufVWo+YNNF6zufsL7VzKgrIvz+NnZeUma8nWXsAGpjeWFBY9beEPfsL6DLDFLUHatN6kKeHETGC9b91ShleTTZ74rX3SM0YW1/cUbK78mfkug+HGt5BP77kcnASQG7bNc $sbc5XbFcQYbbhAn/2ZqKOLWtSfDUiPJs+kQP5jj6uôiwaTJ8q3/Wu1lcx8l7loxaIkezB2csgHHacvuUciEH3SnbcdrzEl+jH0j30VNuGFeKhlsOuHnOFQ ==> < GAME P1hMLd5XIHMcwnPMaMâbIkXw2LZFU23QrvMUnE9oilZZEB2WJGTsû5PQAVy4ËlWmfSJFwpoFj8DjV4Zs4faYMPmàJnity9pW5LmY32GBDyWqRWjùstektcT6RCJeJtDW 4wR8MwRnvJ41opKSkMqfLTkeAn2yTIEgx9t630kLzcSi/7/Eo8wZ2Slr+jU/6dP0AlE0vCAVtyTNP2SEi3Qpa/U0TAlIQGJspL+ÃjD8x4Q9EjUxIQw0101SuKo3jHebIlVvtIurRVzZfOc $mY9WZmY2ÇMXCW/D91JxhwRrrqnJdB+1bLfrqVGkwzKr70KfPkp0KtNKJEq8lAnZVzA ==> < GAME KMQn00ËXoLIkqJvcw2Jd/w4LKJR/q9AzMMe3gwTuCb8q1bU+2dqteovOoZEfKwWPNowWIUyOPitçfFfA3phlxzKrULJN3N3+Yy9Z7OIhÄctsq8VxJ34KX7LZSUtQLOH9F9SJU PCQtjcEvcS84cHbv6cP9cTcFcJcËncLcJ7/yy9dqxcEe59cH7idcD+cDxcR3cL6ecY6/cIecMcC6cV9cGgewdemcCAzqcSâtmcPiy0cMcMw2cQvncYwcEcNtp4rcPcCht0lcC5cRcZ76ucT6u57vicHwcZcPcJpcOuwgtvcUcRicGìqtcFbicDcAicJcAcXscO HX29wN+YJ2jvwMJUAWaJZ4j3JQMcUKILEfCZ2q9nVMEcex6ZwvN0IKTkvLJ/w ==> < GAME eZqwHczho4tmGtvVyZejqB21eSxqJDJycicdJ7kqEOotdiqlWwOSrkYnKgSwkntc18zd+tVKc $lYI0hunJqSUXZJMGbOaE3kYQYAPK+HwAnindzc+ifEPyFLHWÃ9KIbM/NVIQ4MOyjue/NXDkÜBDFG63jjBr5nRm3sCK/WvQsaNX8fI6G4rVZQKWPtJBbvrJeFQ9 pjbBcAFiFyHMxeQErT4TNdlS5zjk6JwZ3MAmdtM/FVi2hHrfa4nhxc2+qMwEb7M8Xxt7dE9mgFfQgnRgocviLNEfdhDc8TBcM4DtAD8EDvmLSykQjWopjdW/WWpZOZIAXqxs1LUcjrZ8wu eaIw ==> < GAME B738TQsïDEl5v8+o/FLPfEhXObmwaYY7XCfHoxi2XQbYXkJo1N0SDVwY9RZNZNLHZ+488i9PEuiHShtnQZP9fs0fCo4xeZEI7EkQl8GIy1y2zFfhryXF+b77ANjHQUyQEzW/+qc $nadwQ+M - Ds 6 6 År Ô ]Ó‡u E (I>@ €l6À¨ ÃYÁX• P ˆ™©žPÿÿÑ - DS{ ]Ó‡u År Ô and 2š@ 0Ò ÃYÁXÀ¨ P•©ž ˆ™P - G 6RrbwMA/7/KgoBECZfjO3cMfGSy2fq1Kf7i2KAogWvzZ4niI+I8yrqDXfiIdFIIMADVOGEM/vg+v8rAiFQlbIgMDRc5jfoQgO/KNDOXEqC15/LEy8gkzWiErIaSQsk7vAqr8lIK zptfQx+DwuAIT9YpXSx4sNË07JU7g6JKXmdpS588nAeewCKXPÁczbqC8LRcei+A ==> < GAMELISTEND >
and also we have the answers so that we see that started off there is in each channel and, I believe i think i know what information sends the servant by each game, i have been in which there am been investigating but.
Es verdad que wormnet usa encriptacion en varios puntos de su programa.
El primer punto cifrado esta en la autentificacion dentro del servidor web, (puerto 80) para entrar en el servidor irc ( puerto 6667) que todavia no he analizado.
Pero en cualquier caso podriamos centrarnos en la primera que nos encontramos, ademas, podria ser el mismo tipo de cifrado que el resto.
Entre otros datos que se envian, lo que cabe a destacar es esta linea:
<CHECK 82UJLI0/GSkkC5ZLvTGBP8KL/toejHlL7VZtc3emJZHUMxp+980JnRQ+rGurnNGn4AGN+1KWvPO5muE=>
y la respuesta:
<ANSWER ZmFJGMq/vyuD/axKS8DWOgBmOZHuK9UP1pj0DpgjF7vRdoln>
bien, mi pregunta es, si tenemos las preguntas y las respuestas, ¿ por que no podemos averiguar clave.
Ademas tenemos todas las preguntas y sus respuestas que queramos por que nos las dan cada vez que entramos.
Yo creo que con algun programita tipo johntheripper o algun programa personalizado se podria intentar algo.
Pero hasta ahi yo no llego, por eso busco ayuda.
Tambien tenemos los datos que nos envia el servidor para darnos la lista de partidas:
<GAMELISTSTART>
<GAME AfbZlFvrXF2wTZcjTR1jJjpTGF5Q4Nv2lp7LsgNdqOi0WUik51yhPIpOgx4U2my4GDKRR1ewcR7/r96FQmJbCTND/KtmYK14GU+gNKdhFCsLIhupr8cusGLwgWvZ6HHJL6TZZIkzDIHWemvHBSDVRyivMSOA0AuyISkghWc+BXjaVEnCGfC0va9K1YpB451CFJesphvi6kV7gGAL0l52tiVvEtWexVkBplLbP0MtXtDeKztxOiZ9vlGIMLtCjY5uNSLHgyMLGjQMuyDFEYmwO+2DRP1i8ogBQC8YweBUnUH1nSw8C9IcfyW9eT8Tk76qxtdXwrRaflI9rtBEYlg3Uw==>
<GAME fPWyIeNdMvyBy3q8hk3jFf6W6llYyrnWo8d2LzGdRDDYQTi3iwK0GwY3WjmFJ+dwL+/TZlB9SSonls2hLhP7TXga1+PGTmY9eZ4uNLdqVYwfYOC8xh7mSM4XoQZhFyj+96WTu9jaskGvaZKfNNIxv/qOKX3Z6Vz8AUTdLB/2N1cZEM2xsTfV78kiv/Tb9MAy4G2XrtUKtviQOrJOpaR4dX+YD5Zi3g799nzxmx2rWHXmvtsNnuHQcFx1VjUJf3DXM4eZbNDnL2d7qV/Lus3FKOT4b9wiqrNTMTsfCKmN2+YO/yuqJSRyxhmLiS5cIxu6yqtqsANXNA86B7pDeQkAzQ==>
<GAME vgiRMBqclfcR8Qr0nPh3iMYF0aysMYQeSs/KLRKV7AfuThVAupYwUq6xopTj7tdWjqd9PxeZ5ewRABmUw76016XT2e9Rakfkv0PUAOCmq9KQPq1+R6JUI7q2OQDNdNC4VXxvDytQW8PSRUCKAG6LuizIGoCvgAEQegAeV0K1TFdT2xWFiR1k7iKio77X9g1PhUQTV2PA1Zcnb/tKF0DMpI5CcQ16GgOEs7uGipKNi+ZUXqMCY92tdiFum5dVkWtecYC02R2GoDueaknUNxHQPUPkXELmHBopcAcvndyRBBMEDICyr5duymjy9MzpztEXEZ8FJsSs7poMi1KvS6DWAw==>
<GAME ZtLXY6YCrWr8HeDOn45LkYUoW9mGyXrDcLIjaK – DfÏ ê ê ]Ó‡u År Ô E Ü2˜@ 0Í(ÃYÁXÀ¨ P•©ž
ˆ™P ë8 nHJ3wTg+q+I4FPNlEWHm1S8FeqK3Rn4WhmlHsRew9UczgW+chTut730na4JfhjsuuvnGjpzt4r912MG8VBhMiFvdnlsyaHAS6R8e4YILe00odezAYEx3XhPkvlQT1SNvfyesltOxCwgxLWmVZXLqXG0KqtAx3Sn9SqQRM+ljPObNUJNwJo1r/1zvz601aVFKhdz7FrUbh/oWmu63oqw2kG9s+yAIDyW2e3Cx7/Xe6VIzhvaAdkTXpDEPt0oKZIuUPccFwxWDZRR5KqKqLWJbNr57J0gSg7UP0Ck22I11iIpHuusw==>
<GAME WkGx1TUy/dDWser+bGZlPcKE8OjWBVlvjFX+wDYaVVyusG8vVh3LZ33RARi8TebliBTibTFrdU852RZUs0p4USp4cUZoC4NxFsXokz0uOMPfQPZOD+oVkAr7pGgO35jQGkohM/hvRg7By3V/cZaq5iQraK1O8gZ3ruzAEZkcDxBF8O9bzlwRdhufz6wUV+67Mt5kciePwYnceFAqxjmvke7cjKTdQpTSgQwzfVSTnLLly2epcpie7U+3b+IhVX6QM0Q4U9IBPFF4zbeZSYJ7cRkAbsje23n4jDYM1Sp6ul7FOOEXYZpwrrYesi7dDHV0eKPw8Xo3nmqDmO62wqBbqw==>
<GAME dn7EhI2N6WHV7OhMfHUVB9kTIhpBdMNV4l0VsKPvdpDnGu7kMDfwjKs0mUgBPSWrvr2D7K0R1hqMmGVV5JUYKGDTLq3P9IG9ejb6hbu3H7pTxbilToQyEIU9GHJkJ4Cz2o8mR6VOkzqyuoh5NNMimqSgRUHrkbL60Km8HZZ0EAub9VaB45w6qJd8GSydVSUg188RHb3BtpdLQshgUi4Jl/N6pJ3HKHAH4Bd1QH4k5qdc9UWOQvNXBkUMLuLKMtwrjFVFT92tC1l2F9Vi16CG8dis7KXrQWfNjHtKCzTr5+HWdzKS8+ZTa4CKty4ec9mw85n89zCdk5bdyyC07lPlEg==>
<GAME icwudqOb+m6EW01w4dwkoDoZbuqBUPnuYNQmmEyanG26D5EclbV6/+ydsqIfXBdI8bDV5MMG9EsdN7tXRxvb0v9wIlVwYdiRkr3d41bc6L6KLUar/FGuhEy49n2m6ritITizYb+NQ3iIqGeFEzNuIJI8VyTeJaBt+WCo1ScJgoya9R8nblijSVBHgie2ytczp9RH9ZROls+oftWdD50Rat1FaqqWjJ3oNBkEhb6AI3KF7axFpzmDLUzkljaLdpfkTJDF3CaQpn8cioWnLmhHJmO5qczhdOALh+8awhsUH4/L4UXnuI1z5i5qnTQqo5XxpVnMRJq8yvy4J47QVlfkuA==>
<GAME ZdCf2pmmnVKznUMz/M5c+fgDYNZSrxEarT6rNjHm7KihjTqKoaQ+kgJCscPvP6TCwnHmjCxzUkxf6LKHhrxKu199mp – D³Ï 6 6 År Ô ]Ó‡u E (I=@ €l7À¨ ÃYÁX• P
ˆ™©žÍPÿÿ … – D r ê ê ]Ó‡u År Ô E Ü2™@ 0Í'ÃYÁXÀ¨ P•©žÍ
ˆ™P —Ç ZHVqdufVWo+YNNF6zufsL7VzKgrIvz+NnZeUma8nWXsAGpjeWFBY9beEPfsL6DLDFLUHatN6kKeHETGC9b91ShleTTZ74rX3SM0YW1/cUbK78mfkug+HGt5BP77kcnASQG7bNSbc5XbFcQYbbhAn/2ZqKOLWtSfDUiPJs+kQP5jj6u4oiwaTJ8q3/Wu1lcx8l7loxaIkezB2csgHHacvuUciEH3SnbcdrzEl+jH0j30VNuGFeKhlsOuHnOFQ==>
<GAME P1hMLd5XIHMcwnPMaM4abIkXw2LZFU23QrvMUnE9oilZZEB2WJGTs4u5PQAVy45ElWmfSJFwpoFj8DjV4Zs4faYMPm2aJnity9pW5LmY32GBDyWqRWj2ustektcT6RCJeJtDW4wR8MwRnvJ41opKSkMqfLTkeAn2yTIEgx9t630kLzcSi/7/Eo8wZ2Slr+jU/6dP0AlE0vCAVtyTNP2SEi3Qpa/U0TAlIQGJspL+6AjD8x4Q9EjUxIQw0101SuKo3jHebIlVvtIurRVzZfOMY9WZmY21CMXCW/D91JxhwRrrqnJdB+1bLfrqVGkwzKr70KfPkp0KtNKJEq8lAnZVzA==>
<GAME KMQn005EXoLIkqJvcw2Jd/w4LKJR/q9AzMMe3gwTuCb8q1bU+2dqteovOoZEfKwWPNowWIUyOPit1cfFfA3phlxzKrULJN3N3+Yy9Z7OIh5Actsq8VxJ34KX7LZSUtQLOH9F9SJUcPQtjEvS84Hbv6P9TFJ5EnLJ7/yy9dqxEe59H7idD+DxR3L6eY6/IeMC6V9GgewdemCAzqS4atmPiy0MMw2QvnYwENtp4rPCht0lC5RZ76uT6u57viHwZPJpOuwgtvURiG2iqtFbiDAiJAXsOHX29wN+YJ2jvwMJUAWaJZ4j3JQMcUKILEfCZ2q9nVMEcex6ZwvN0IKTkvLJ/w==>
<GAME eZqwHczho4tmGtvVyZejqB21eSxqJDJycicdJ7kqEOotdiqlWwOSrkYnKgSwkntc18zd+tVKLYI0hunJqSUXZJMGbOaE3kYQYAPK+HwAnindzc+ifEPyFLHW6A9KIbM/NVIQ4MOyjue/NXDk5UBDFG63jjBr5nRm3sCK/WvQsaNX8fI6G4rVZQKWPtJBbvrJeFQ9pjbBcAFiFyHMxeQErT4TNdlS5zjk6JwZ3MAmdtM/FVi2hHrfa4nhxc2+qMwEb7M8Xxt7dE9mgFfQgnRgocviLNEfdhDc8TBcM4DtAD8EDvmLSykQjWopjdW/WWpZOZIAXqxs1LUcjrZ8wuEaIw==>
<GAME B738TQs5iDEl5v8+o/FLPfEhXObmwaYY7XCfHoxi2XQbYXkJo1N0SDVwY9RZNZNLHZ+488i9PEuiHShtnQZP9fs0fCo4xeZEI7EkQl8GIy1y2zFfhryXF+b77ANjHQUyQEzW/+qNadwQ+M – Ds 6 6 År Ô ]Ó‡u E (I>@ €l6À¨ ÃYÁX• P
ˆ™©žPÿÿÑ – DS{ ]Ó‡u År Ô E 2š@ 0Ò ÃYÁXÀ¨ P•©ž
ˆ™P -G 6RrbwMA/7/KgoBECZfjO3cMfGSy2fq1Kf7i2KAogWvzZ4niI+I8yrqDXfiIdFIIMADVOGEM/vg+v8rAiFQlbIgMDRc5jfoQgO/KNDOXEqC15/LEy8gkzWiErIaSQsk7vAqr8lIKZptfQx+DwuAIT9YpXSx4sN5E07JU7g6JKXmdpS588nAeewCKXP3AczbqC8LRcei+A==>
<GAMELISTEND>
Y tambien tenemos las respuestas por que vemos que partidas hay en cada canal ademas, creo que se que informacion manda el servidor por cada partida, ha sido en lo que he estado investigando mas.
Here is a bad traduccion of my words , dont laught
English :
I am speaking of wormnet.
It is truth that wormnet uses encriptacion in several points of its program. The first based point this in the authentication within the Web server, (port 80) to enter the servant IRC (port 6667) who todavia I have not analyzed. But in any case podriamos to center to us in first that we were, ademas, podria to be the same type of coding that the rest. Among other data that are envian, which is possible to emphasize is this line:
< CHECK 8ÙJLI0/GSkkC5ZLvTGBP8KL/toejHlL7VZtcémJZHUMxp+980JnRQ+rGurnNGnÂGN+1KWvPO5muE = > and the answer: < ANSWER ZmFJGMq/vyuD/axKS8DWOgBmOZHuK9UP1pj0DpgjF7vRdoln >
, my question is well, if we have the questions and the answers, so that we cannot find out key.
And we have all the questions and their answers that we want so that us they give them whenever we entered. I believe that with algun programita type to johntheripper or algun customized program podria to try something. But until ahi I do not arrive, for that reason I look for aid. Also we have the data that envia the servant to give us the list us of games:
< GAMELISTSTART > < GAME AFBCZlcFvrcXcF2wcTcZcjcTcR1jcJjpcTcGcF5cQ4cNv2lp7cLsgcNdqcOi0cWcUik51yhcPcIpcOgxcÛ2my4cGcDcKcRcR1ewcR7/r96cFcQmcJbcCTcNcD/cKtmcYcK14cGcU+gcNcKdhcFcCscLcIhupr8cuscGcLwgcWvcZ6cHcHcJcL6cTcZcZcIk ZCDcIcHcWemvcHcBcScDcVcRyivcMcScOcA0cAuycIcSkghcWc+cBcXjacVcEncCGfcC0va9cKçYpcB45cÇFcJesphvi6kcV7gcGcAcL0l52ticVvcEtcWexcVkcBplcLbcP0cMtcXtcDecKztxcOicZ9vlcGcIcMcLtcCjcYücNcScLcHgycMcLcGjc QCMuycDcFcEcYmwcO+2cDcRcP1i8ogcBcQcC8cYwecBcUncUcH1ncSw8cC9cIcfycW9ecT8cTk76qxtdcXwrcRaflcI9rtcBcEcYlgcÚw ==> < GAME FCPcWycIecNdcMvycBy3q8hk3jcFf6cW6llcYyrncWo8d2cLzcGdcRcDcDcYcQcTii'wcK0cGwcY3cWjmcFcJ+dwcL+/cTcZlcB9cScSonls2hcLhcP7cTcXga1+cPcGcTmcY9ecZûcNcLdqcVcYwfcYcOcC8xh7mcScM4cXocQcZhcFyj+96cWcTu9jaskcGvacZc KFCNcNcIxv/qcOcKcX3cZ6cVz8cAcUcTdcLcB/2cNçZcEcM2xscTfcV78kiv/cTb9cMcAy4cG2cXrtcUcKtvicQcOrcJcOpacR4dcX+cYcD5cZi3g799nzxmx2rcWcHcXmvtscNnucHcQcFxçVjcUcJf3cDcXcMêcZbcNcDncL2d7qcV/cLus3cFcKcOcT4b9 WIQRCNcTcMcTsfcCKmcN2+cYcO/yuqcJcScRyxhmcLicS5cIxu6yqtqscAcNcXcNcA86cB7pcDecQkcAzcQ ==> < GAME VGICRcMcBqclfcR8cQr0ncPhi'cMcYcF0ayscMcYcQecSs/cKcLcRcKcV7cAfucThcVcAupcYwcUq6xopcTj7tdcWjqd9cPxecZëwcRcAcBmcUw76016cXcTè9cRakfkv0cPcUcAcOcCmq9cKcQcPq1+cR6cJcUcI7qcÒcQcDcNdcNcC4cVcXxvcDytcQcW8c PCScRcUcCKcAcG6cLuizcIcGocCvgcAcEcQegcAecV0cKçTcFdcT2xcWcFicR1k7icKio77cX9gçPhcUcQcTcV2cPcAçZcnb/tcKcF0cDcMpcI5cCcQ16cGgcOcEs7ucGipcKcNi+cZcUcXqcMcCY92tdicFum5dcVkcWtecYcC02cR2cGocDueaknc $UCNxcHcQcPcUcPkcXcEcLmcHcBopcAcvndycRcBcBcMcEcDcIcCyr5duymjy9cMzpztcEcXcEcZ8cFcJscSs7pocMiçKvcS6cDcWc $aw ==> < GAME ZtLXY6YCrWr8HeDOn45LkYUoW9mGyXrDcLIjaK - DfÏ ê ê ]Ó‡u År Ô and Ü2˜@ 0Í(ÃYÁXÀ¨ P•©ž ˆ™P ë8 nHJ3wTg+q+I4FPNlEWHm1S8FeqK3Rn4WhmlHsRew9UczgW+chTut730na4JfhjsuuvnGjpzt4r912MG8VBhMiFvdnlsyaHAS6R8e4YILe00odezAYEx3XhPkvlQT1SNvfyesltOxCwgxLWmVZXLqXc $g0KqtAx3Sn9SqQRM+ljPObNUJNwJo1r/1zvz601aVFKhdz7FrUbh/oWmuõ'qw2kG9s+yAIDyWè3Cx7/Xe6VIzhvaAdkTXpDEPt0oKZIuUPccFwxWDZRR5KqKqLWJbNr57J0gSg7UP0C k2Ì11iIpHuusw ==> < GAME WkGx1TUy/dDWser+bGZlPcKE8OjWBVlvjFX+wDYaVVyusG8vVh3LZ33RARi8TebliBTibTFrdU852RZUs0pÛSp4cUZoC4NxFsXokz0uOMPfQPZOD+oVkAr7pGgO35jQGkohM/hv Rg7By3V/cZaqïQraK1O8gZ3ruzAEZkcDxBF8O9bzlwRdhufz6wUV+67Mt5kciePwYnceFAqxjmvke7cjKTdQpTSgQwzfVSTnLLlyèpcpie7U+3b+IhVX6QM0QÛ9IBPFF4zbeZSYJ7cRkAbsje23 n4jDYM1Sp6ul7FOOEXYZpwrrYesi7dDHV0eKPw8Xo3nmqDmO62wqBbqw ==> < GAME dn7EhI2N6WHV7OhMfHUVB9kTIhpBdMNV4l0VsKPvdpDnGu7kMDfwjKs0mUgBPSWrvr2D7K0R1hqMmGVV5JUYKGDTLq3P9IG9ejb6hbu3H7pTxbilToQyEIU9GHJkJ4Czò8m r6VOkzqyuoh5NNMimqSgRUHrkbL60Km8HZZ0EAub9VaB45w6qJd8GSydVSUg188RHb3BtpdLQshgUi4Jl/N6pJ3HKHAH4Bd1QH4k5qdc9UWOQvNXBkUMLuLKMtwrjFVFT92tC1l2 f9Vi16CG8dis7KXrQWfNjHtKCzTr5+HWdzKS8+ZTa4CKtyêc9mw85n89zCdk5bdyyC07lPlEg ==> < cc $game icwudqOb+m6EW01w4dwkoDoZbuqBUPnuYNQmmEyanG26DËclbV6/+ydsqIfXBdI8bDV5MMG9EsdN7tXRxvb0v9wIlVwYdiRkr3d41bc6L6KLUar/FGuhEy49n2m6ritITizYb+NQi'IqGeFEzNuIJ i8VyTeJaBt+WCo1ScJgoya9R8nblijSVBHgie2ytczp9RH9ZROls+oftWdD50Rat1FaqqWjJo'NBkEhbÃI3KF7axFpzmDLUzkljaLdpfkTJDF3CaQpn8cioWnLmhHJmO5qczhdOALh+åwhsUH4/L ÛXnuI1zï5qnTQqo5XxpVnMRJq8yvy4J47QVlfkuA ==> < GAME ZdCf2pmmnVKznUMz/M5c+fgDYNZSrxEarT6rNjHm7KihjTqKoaQ+kgJCscPvP6TCwnHmjCxzUkxf6LKHhrxKu199mp - D³Ï 6 6 År Ô ]Ó‡u E (I=@ €l7À¨ ÃYÁX• P ˆ™©žÍPÿÿ ... - D r ê ê ]Ó‡u År Ô and Ü2™@ 0Í'ÃYÁXÀ¨ P•©žÍ ˆ™P --Ç ZHVqdufVWo+YNNF6zufsL7VzKgrIvz+NnZeUma8nWXsAGpjeWFBY9beEPfsL6DLDFLUHatN6kKeHETGC9b91ShleTTZ74rX3SM0YW1/cUbK78mfkug+HGt5BP77kcnASQG7bNc $sbc5XbFcQYbbhAn/2ZqKOLWtSfDUiPJs+kQP5jj6uôiwaTJ8q3/Wu1lcx8l7loxaIkezB2csgHHacvuUciEH3SnbcdrzEl+jH0j30VNuGFeKhlsOuHnOFQ ==> < GAME P1hMLd5XIHMcwnPMaMâbIkXw2LZFU23QrvMUnE9oilZZEB2WJGTsû5PQAVy4ËlWmfSJFwpoFj8DjV4Zs4faYMPmàJnity9pW5LmY32GBDyWqRWjùstektcT6RCJeJtDW 4wR8MwRnvJ41opKSkMqfLTkeAn2yTIEgx9t630kLzcSi/7/Eo8wZ2Slr+jU/6dP0AlE0vCAVtyTNP2SEi3Qpa/U0TAlIQGJspL+ÃjD8x4Q9EjUxIQw0101SuKo3jHebIlVvtIurRVzZfOc $mY9WZmY2ÇMXCW/D91JxhwRrrqnJdB+1bLfrqVGkwzKr70KfPkp0KtNKJEq8lAnZVzA ==> < GAME KMQn00ËXoLIkqJvcw2Jd/w4LKJR/q9AzMMe3gwTuCb8q1bU+2dqteovOoZEfKwWPNowWIUyOPitçfFfA3phlxzKrULJN3N3+Yy9Z7OIhÄctsq8VxJ34KX7LZSUtQLOH9F9SJU PCQtjcEvcS84cHbv6cP9cTcFcJcËncLcJ7/yy9dqxcEe59cH7idcD+cDxcR3cL6ecY6/cIecMcC6cV9cGgewdemcCAzqcSâtmcPiy0cMcMw2cQvncYwcEcNtp4rcPcCht0lcC5cRcZ76ucT6u57vicHwcZcPcJpcOuwgtvcUcRicGìqtcFbicDcAicJcAcXscO HX29wN+YJ2jvwMJUAWaJZ4j3JQMcUKILEfCZ2q9nVMEcex6ZwvN0IKTkvLJ/w ==> < GAME eZqwHczho4tmGtvVyZejqB21eSxqJDJycicdJ7kqEOotdiqlWwOSrkYnKgSwkntc18zd+tVKc $lYI0hunJqSUXZJMGbOaE3kYQYAPK+HwAnindzc+ifEPyFLHWÃ9KIbM/NVIQ4MOyjue/NXDkÜBDFG63jjBr5nRm3sCK/WvQsaNX8fI6G4rVZQKWPtJBbvrJeFQ9 pjbBcAFiFyHMxeQErT4TNdlS5zjk6JwZ3MAmdtM/FVi2hHrfa4nhxc2+qMwEb7M8Xxt7dE9mgFfQgnRgocviLNEfdhDc8TBcM4DtAD8EDvmLSykQjWopjdW/WWpZOZIAXqxs1LUcjrZ8wu eaIw ==> < GAME B738TQsïDEl5v8+o/FLPfEhXObmwaYY7XCfHoxi2XQbYXkJo1N0SDVwY9RZNZNLHZ+488i9PEuiHShtnQZP9fs0fCo4xeZEI7EkQl8GIy1y2zFfhryXF+b77ANjHQUyQEzW/+qc $nadwQ+M - Ds 6 6 År Ô ]Ó‡u E (I>@ €l6À¨ ÃYÁX• P ˆ™©žPÿÿÑ - DS{ ]Ó‡u År Ô and 2š@ 0Ò ÃYÁXÀ¨ P•©ž ˆ™P - G 6RrbwMA/7/KgoBECZfjO3cMfGSy2fq1Kf7i2KAogWvzZ4niI+I8yrqDXfiIdFIIMADVOGEM/vg+v8rAiFQlbIgMDRc5jfoQgO/KNDOXEqC15/LEy8gkzWiErIaSQsk7vAqr8lIK zptfQx+DwuAIT9YpXSx4sNË07JU7g6JKXmdpS588nAeewCKXPÁczbqC8LRcei+A ==> < GAMELISTEND >
and also we have the answers so that we see that started off there is in each channel and, I believe i think i know what information sends the servant by each game, i have been in which there am been investigating but.
